Slashdot Mirror


Optical Lock Foils Thieves

opticsorg writes "A UK inventor has come up with a way to make what is thought to be an unpickable lock. The Optilock contains a bundle of up to six input optical fibers on one side of the lock barrel and a corresponding number of fibers on the other side. When a special key is inserted into the lock, it connects the fibers in a unique routing pattern opening the lock in a fraction of a second. Light then flows around the circuit until the key is removed and the circuit is broken."

32 of 156 comments (clear)

  1. Unpickable? by climberkid · · Score: 5, Insightful

    Accually saying that this is an "unpickable" lock is risky. I mean, look at the efforts by the RIAA to prevent P2P, or the anti-burning CD's with the corrupt files that crash computers, someone fixed that with a sharpie. I think that making statements like that is seriously underestimating human potential.

    1. Re:Unpickable? by rjshields · · Score: 3, Funny

      I wonder if I could "pick" it with a 14lb lump hammer ;)

      --
      In this world nothing is certain but death, taxes and flawed car analogies.
  2. Not unpickable by SandSpider · · Score: 4, Insightful

    This is obvious, but the lock isn't unpickable, it's just going to take a while before people figure out how to pick it, and it'll raise the bar on tools needed for picking at most.

    Also, while this will be handy for places with cement walls and thick steel doors, places with windows and weak door frames will still be vulnerable. Plus, of course, the social engineering attacks.

    That being said, I'm a big fan of new, shiny locks, so hooray for the people who made it.

    =Brian

    --
    There is nothing so good that someone, somewhere, will not hate it.
    1. Re:Not unpickable by dman123 · · Score: 4, Funny
      Not only will it take a while for people to learn how to pick it, it will take a while for the lock to even exist...

      Quoting the article... "At the moment, the lock is a computer model. This money will allow us to see how these ideas will work and what the devices will actually look like."

      Maybe it will be one of those situations where the lockpicks are invented before the vulnerability is found and fixed by the Microsoft, I mean, the manufacturer.

      --

      --
      dman123 forever!
      Filtering out the -1s and 0s since 1999.
    2. Re:Not unpickable by ivern76 · · Score: 3, Interesting

      If the description is correct, and light flows "in a circuit", then picking it is trivial as long as you have a key that can route light in a programmatic way.

      See, what you have is the number of possible ways to match N fibers with N fibers. It's easy to see that the total number of locks is N!. However, the requisite that light flow in a circuit makes it so you can follow the loop. Figure out which of your switches on side A is getting light, route it to all fibers on side B until one of them makes a different fiber emit light, rinse, repeat. Having some fibers be decoys or having multiple light sources doesn't make this more complex at all (as long as you have a constant number of light sources.) As you can probably figure out, the worst case number of locks is now N + (N-1) + ... + 1, which is N * (N - 1) / 2. Not a whole lot of locks, and definitely something a machine can brute-force.

      Of course, this brute force approach can be denied by locking the door permanently if too many 'wrong keys' are inserted. A better approach would be to ditch the 'circuit' idea altogether and just use N light sources with random matching.

      I didn't have time to thoroughly read the original article, so maybe I'm just stating the obvious.

  3. Electronics by aridhol · · Score: 3, Insightful
    According to the article:
    Most locks are picked by [...] bypassing some sort of electronic control system. Rice's idea removes these vulnerable components.
    Won't there need to be an electronic control system that determines when you have the correct light pattern? Just bypass (or hack) the light-detection system, and you're in.
    --
    I can't say that I don't give a fuck. I've just run out of fuck to give.
    1. Re:Electronics by alienw · · Score: 3, Insightful

      In that case, any EE could design an unbreakable lock in about 10 minutes. Put a keypad on the front and the electronics in the back. To avoid getting the electronics hacked, make the keypad physically or electrically isolated from the rest of circuit. Then, the only way to bypass it is if you know the code - which could be very long.

    2. Re:Electronics by ivern76 · · Score: 4, Insightful

      Remove keypad, insert new keypad that looks just like it and has a keypress logger. K?

    3. Re:Electronics by Atrahasis · · Score: 3, Insightful
      Put a keypad on the other side of the door that will only let you out if you enter a different code to the one you used to get in. That code is then the code you use to get in next time.

      Of course, this is weak to people who will just use alternating codes, but security is always inversely proportional to convenience.

  4. Copyright Reference by 4of11 · · Score: 5, Funny

    But if they did pick it, at least they wouldn't be circumventing copyright restrictions. Because that would be terrible.
    /obligatory slashdot DMCA reference

  5. Gonna need new equipment... by BigZaphod · · Score: 3, Funny

    I guess I'm going to have to find someone selling tiny little prisms now so I can build myself a new lock-pick set...

  6. But it requires a power supply. by Spudley · · Score: 3, Interesting

    It may be unpickable, but using fibre-optics means it requires a power supply, which means it is still vunerable.

    Many locking mechanisms require power, and if the power fails, there are only two possibilities: either it will be locked shut and unopenable, or it will have a fail-safe mechanism to unlock automatically if the power fails.

    Either way, it leaves itself open to anyone who wants to cause trouble.

    In any case, any door that people will be behind will necessitate the latter, as otherwise they could get locked in during a fire, which means that anyone wanting to gain access only needs to cut the power and they're in.

    --
    (Spudley Strikes Again!)
    1. Re:But it requires a power supply. by aridhol · · Score: 3, Insightful
      In any case, any door that people will be behind will necessitate the latter, as otherwise they could get locked in during a fire,
      Not necessarily. There could be a physical override on the inside that directly manipulates the latch. This allows an exit, even if the door is locked.
      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    2. Re:But it requires a power supply. by pagercam2 · · Score: 5, Interesting

      This isn't true the only lock currently approved for DoD Spin locks is self powered it uses a LCD that indicated the current number being pointed to rather than a marked dial. You have to spin the lock a few time to generate enough power for it to work and then you dial in the combination. Batteries are a big no no in any sort of lock. If people are behind the door a mechanical override is given, the deadbolt or other locking mechanism is mechanical and as long as all mechanical items are internal it is allowed. The old drill throigh the locking bars is always a possibility but as with encyption its no really unbreakable just unbreakable in a reasonable period of time.

    3. Re:But it requires a power supply. by Captain+Nitpick · · Score: 3, Interesting
      Exit signs are powered by radioactive Cadmium. They last ~20 years. The level of radiation is low enough that they are safe for preschools!

      No, they're powered by a chemical Nickel Cadmium (NiCad) battery.

      Getting a building built is hard enough without making yourself fall under NRC jurisdiction because you installed an RTG.

      There are tritium-based emergency exit signs, but they are more expensive than battery-backed signs, and are typically only used in aircraft, or where power is unavailable.

      --
      But then again, I could be wrong.
  7. Probably not unpickable by Anonymous Coward · · Score: 3, Insightful

    Certainly if you have a key you can replicate that key, for one. Secondly, can a master key be made that just shines takes light from one side and shines it down all the other holes ? What about one that is configurable, and can try different mappings quickly ?

    Basically, this is no more unpickable than a card-swipe.

    Finally, electric locks have a limited market, which is well saturated with card-swipe and PIN punch products.

    1. Re:Probably not unpickable by Anonymous Coward · · Score: 3, Insightful

      This assumes that the light is only transfered unaltered - the Key could just as easily filter, phase shift, combine or otherwise alter the light so that it is not an easy process to replicate.

  8. same problem as existing locks by mugnyte · · Score: 4, Insightful

    picking a lock is just one part of a problem : the other is securing the key. in a bar, one could theoretically press a key into a mold for later duplication (old trick and not very efficient).

    however, with an optical key, one merely has to carry around a recepticle that, in turn, flashes a beam through the key's inputs, and record the appropriate output. nothing physical needs to be made. in today's terms, i call in the sequence to a buddy who then lays fiber into a template and uses it. meanwhile, i engage conversation on target, reporting when she's left.

    cars? are you kidding? these are even easier, merely get a job as a valet and start your database. since it's all just digital information, you have access to VIN and lock solution, license plate number and home town/state (if not entire address, since most people's cars have it somewhere - like the insurance docs). these databases could be traded online just like anything else.

    while i think this is very interesting, it still is no substitute for bio-based locks. however, they have their own problems (seem like every part of the body can be captured/duplicated).

  9. Re:Unpickable, huh? by Smidge204 · · Score: 3, Interesting

    Honest question: Has anyone ever defeated a timelock?

    Obviously not the perfect solution, because it still opens at predictable intervals, but since there is *no* access to the lock itself from outside the vault, it certaintly can't be picked...
    =Smidge=

  10. Picking one of these would be easy. by TrebleJunkie · · Score: 3, Interesting

    Let's look at the key.

    Take the example of "6" inputs on the lock and the key:

    A B C D E F

    In order for it to "complete" a circuit (or circuits), you have to "connect" certain inputs together to sort of "loop" the light back to the lock and complete the circuit.

    For instance:

    A-B C-D E-F

    That's three "loops", lets call them.

    There are 30 possible combinations for the first
    loop.

    There are then 12 combinations for the second loop,

    and the third, no combination -- there's only one choice.

    A total of 360 combinations, give or take. You could easily make a device to mimic every possible circuit very easily. Breaking the lock would take seconds.

    Now let's look at the lock.

    Assuming the light source exists in the lock, you would be able to tell immediately which inputs send light *to* the key, and which return light *from* the key. With a simple LED, you could easily "light up" the return paths, to see which loops they connect to. Armed with this information, it's easy to find the remaining possibly valid combinations, and try them.

    I'm telling you, this lock could be picked with near lightning speed.

    No, you would need to include some sort of electronic timing component -- preferrably in the key -- to initiate *pulses* of light, rather than a steady stream. In which case, the path of the light is basically irrelevany -- it's the timing of the light pulse that would act as the key. More secure (but not pick-proof.) and less complicated.

    Or you could do something fancy with prisms or whatnot to split the red-green-blue portion of a white/colored light into different light paths, but, again, it's overkill, and still not very secure.

    --

    Ed R.Zahurak

    You know, oblivion keeps looking better every day.

  11. Locks are like programming languages.... by HotNeedleOfInquiry · · Score: 4, Informative
    There's hundreds of them out there, but only a few practical ones in widespread use. I predict that this one is too expensive for general use. There are already several locks that are exceedingly difficult to pick or create an unauthorized copy. Medico for example. Very difficult to pick and very tight control over blanks.

    --
    "Eve of Destruction", it's not just for old hippies anymore...
  12. OT Story by Rick+the+Red · · Score: 4, Interesting

    Back in the day, Cadillac built a show car with no lock. There was a Cadillac emblem etched into the door glass, and a Cadillac emblem on the key fob. You held the key fob up to the etched emblem and the door unlocked. Pretty cool, except they put the car on the trailer and moved it from show to show, never actually driving it. Yep, the battery ran down, and without any other lock, they couldn't get in. Of course, the hood release was on the inside, so they couldn't jump the battery, either!

    --
    If all this should have a reason, we would be the last to know.
  13. Unpickable? by El · · Score: 3, Insightful

    With 6 optical fibers, aren't there only 6! or 720 possible different "routing patterns"? How hard would it be to construct an electro-optical devices that would simply run through all 720 patterns until one worked? And no, you can't disable the device for a fixed time when it gets a misroute, because it is obviously going to misroute while someone is inserting the key... and someone like me who has two almost identical keys on their keychain is going to get really pissed off when they insert the wrong one. Finally... haven't we learned by now that replacing a simple mechanical device with an electro-optical-mechanical device greatly increases your failure modes?

    --

    "Freedom means freedom for everybody" -- Dick Cheney

  14. Semantic Issues by fm6 · · Score: 3, Insightful
    My first thought was that Jeremy Rice didn't use the U-Word, but that the reporter grabbed it as convenient journalese. (I have other issues with the reporter's use of language -- see below.) But all the news reports seem to be saying "Unpickable", which can only mean this is an actual claim. Perhaps "pick" in this context refers to the specific technique for physically probing the tumblers of a lock, not just a synonym for "disable".

    It's all pretty moot anyway. Spies pick locks, but most of us are more concerned about more prosaic intruders. Who don't waste their time with picks -- they smash or jimmy.

    What was my other semantic issue? Oh yeah, "failsafe". Come on people. if you mean "foolproof," say that. I'd like to see "failsafe" preserved for its original meaning, though my hopes are dimming!

  15. Re:Unpickable, huh? by Anonymous Coward · · Score: 5, Interesting
    It is entirely possible that there *is not* an override. I used to work in a bank, and part of my responsibilities were to lock up the main safe at night. It was time-locked, and once the lock was set there was *no* way to get that safe back open again until they unlocked. The entire mechanism was mechanical - there was no electricity to cut. The internal clocks had to be wound everyday. This was so much of a concern that :

    1. We had to physically check and make sure that no-one was in the vault (stray teller, somebody left their kid, etc) before we closed it.

    2. There was an O2 tank & mask in the vault in case someone *did* get locked in.

    3. Be really, really careful at setting the timers correctly because if it wasn't open in time for the next business day, we were screwed (no, this wasn't a three-day weekend...)

  16. Sneakers by CyberVenom · · Score: 5, Funny

    Do any of you remember the old (and surprisingly realistic compared to newer crap) hacker movie "Sneakers"? When they are trying to break into the office to steal the chip, Redford comes to a door with an electronic lock. After getting an earful of explanation (which we don't hear) from his partner back in the van about how the military deals with that kind of lock, he agrees to try a new lockpicking method. He kicks the door, and the bolt pops out of the doorjam...

  17. Onion headline by heldlikesound · · Score: 4, Funny

    "Optical sledgehammer opens optical lock."

    --


    Cloud City Digital: DVD Production at its cheapest/finest
  18. What ever you do, don't read the artical! by NickFusion · · Score: 4, Informative

    Otherwise you might stumble across this information:

    Rice says that the only way someone could pick the lock is to duplicate the key. "You could potentially have as many different points as you want on the lock barrel as inputs and outputs," he explained. "Because it is a 3D pathway you are dealing with, you have potentially billions or trillions of combinations depending on how the lock is made. The probability of duplicating the path is very small."

    That said, a lot of these fancy locks seem like overkill, especially since in very high security systems, you'd tend to want some kind of human oversight in the loop.

    --
    What were you expecting?
  19. If they're going to make locks this sophisticated. by 7-Vodka · · Score: 3, Interesting

    Why not use the public/private key model. Have the lock generate a message encrypted with the physical key's private crypt key, then have they physical key decode it and retransmit to the lock...

    --

    Liberty.

  20. Thinking too hard by macemoneta · · Score: 3, Funny

    You folks are thinking too hard. You need a low tech solution, that a burglar with a third grade education would use. :-)

    Just put a little graphite-oil (used in regular locks) in the optical lock. Then, when the owner tears it out because it doesn't work (optical paths obscured by the graphite), the burglars can go back to business as usual.

    --

    Can You Say Linux? I Knew That You Could.

  21. I already know how it could be picked by itwerx · · Score: 4, Insightful

    Not that the pick exists yet of course, but the simple fact that it uses light routes makes it pickable.
    Since the light needs transceivers on either end and a physical interface in between for the key all you need to do is make a key with its own transceivers instead of simple light pipes (you'd probably have light-pipes out to an external device which would house a computer "brain" and the transceivers).
    So you simply put the key in (or connect it or whatever the physical interface is) and let the computer start routing the inputs to different combinations of outputs.
    It would be like the brute-force picker that Medeco has for their locks only maybe a lot faster!
    However, having designed a pick, I can also think of half a dozen ways to slow it down enough to make it unuseable. :)
    (If they're smart enough to figure out how to email me maybe I'll even tell them. :)

  22. I didn't RTFA, but I have an answer anyway! by Baron_Yam · · Score: 4, Informative

    Without RTFA, I think I can explain why 6 inputs can create more than 720 combinations...

    You're counting the possible pathways. You've forgotten to count the positionings! Two keys with the same routing pattern with only one input off by a fraction of a millimeter would not open the same lock.